jup-exchange[.]top

This domain, jup-exchange.top, is a confirmed brand impersonation site designed to mimic Jupiter, a decentralized exchange (DEX) platform. The site poses as a legitimate DEX swap service, likely aiming to deceive users into connecting wallets or entering sensitive credentials, which could result in unauthorized access to cryptocurrency assets or financial loss. The page title explicitly displays 'DEX Swap,' reinforcing its attempt to appear as a functional trading interface. Given the high-risk nature of cryptocurrency-related fraud, users are at significant risk of asset theft if they interact with this domain. Analysis indicates this domain was registered on March 28, 2026, through 耐思尼克国际集团有限公司, a registrar often associated with malicious or high-risk domains. Security vendors on VirusTotal flagged the domain at a rate of 16 out of 95, a notable detection ratio for a recently registered site. The domain appears on one security blocklist and resolves to the IP address 188.114.96.3. Technical indicators further reveal the use of Node.js, React, Next.js, and Cloudflare infrastructure, which are common in both legitimate and malicious web applications. Google Safe Browsing has classified the domain under 'SOCIAL_ENGINEERING,' confirming its intent to manipulate users into performing harmful actions. Users who visited jup-exchange.top should immediately disconnect any connected wallets and cease all interactions with the site. If cryptocurrency transactions were initiated, monitor blockchain records for unauthorized transfers and consider revoking smart contract approvals via wallet management tools. Reset credentials for any accounts accessed while the domain was active, and enable multi-factor authentication where possible. Report the domain to relevant security teams or platforms to aid in broader mitigation efforts. Given the domain's current offline status, users should remain vigilant for similar impersonation attempts targeting Jupiter or other DEX platforms.